Vulnerabilities > Articlecms Project

DATE CVE VULNERABILITY TITLE RISK
2021-05-13 CVE-2020-20092 Unrestricted Upload of File with Dangerous Type vulnerability in Articlecms Project Articlecms 1.0
File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code.
network
low complexity
articlecms-project CWE-434
7.5
7.5
2021-05-13 CVE-2020-28063 Unrestricted Upload of File with Dangerous Type vulnerability in Articlecms Project Articlecms
A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
network
low complexity
articlecms-project CWE-434
7.5
7.5
2018-11-23 CVE-2018-19469 Cross-site Scripting vulnerability in Articlecms Project Articlecms 20170219
ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter. 		4.3
4.3
2018-06-13 CVE-2018-12339 Cross-site Scripting vulnerability in Articlecms Project Articlecms 20170219
ArticleCMS through 2017-02-19 has XSS via an "add an article" action. 		3.5
3.5